When merchants indicator a contract by using a payment processor, they comply with be subject matter to fines whenever they fall short to keep up PCI DSS compliance. PCI compliance is split into 4 degrees, based on the once-a-year range of credit history or debit card transactions a company processes. https://www.nathanlabsadvisory.com/blog/tag/governance/